Findings

CVE-2026-50619

A path traversal vulnerability has been reported to affect Qsirch.

Published Oct 15, 2026 · updated Oct 15, 2026 · QNAP Systems Inc. Qsirch

A path traversal vulnerability has been reported to affect Qsirch. If exploited, the vulnerability could allow remote attackers to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsirch 7.0.3.0 and later

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 15, 2026 · NIST NVD

    Detected

    A path traversal vulnerability has been reported to affect Qsirch. If exploited, the vulnerability could allow remote attackers to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsirch 7.0.3.0 and later

  2. Oct 15, 2026 · NIST NVD

    Updated

    A path traversal vulnerability has been reported to affect Qsirch. If exploited, the vulnerability could allow remote attackers to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsirch 7.0.3.0 and later

  3. Oct 15, 2026 · NIST NVD

    Updated

    A path traversal vulnerability has been reported to affect Qsirch. If exploited, the vulnerability could allow remote attackers to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsirch 7.0.3.0 and later

Affected

  • vendor QNAP Systems Inc. Qsirchversion unspecified

Sources

  • CIRCL Vulnerability LookupVulnerability recordCVE-2026-50619

    A path traversal vulnerability has been reported to affect Qsirch. If exploited, the vulnerability could allow remote attackers to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsirch 7.0.3.0 and later

    vulnerability.circl.lu
  • CVE.orgVulnerability recordCVE-2026-50619

    A path traversal vulnerability has been reported to affect Qsirch. If exploited, the vulnerability could allow remote attackers to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsirch 7.0.3.0 and later

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2026-50619

    30-day exploitation probability 0.6%

    first.org
  • NIST NVDVulnerability recordCVE-2026-50619

    A path traversal vulnerability has been reported to affect Qsirch. If exploited, the vulnerability could allow remote attackers to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsirch 7.0.3.0 and later

    nvd.nist.gov

References

CVE-2026-50619 · ZeroDay Findings